GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-02-23 08:26:41 +01:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #311 from konstruktoid/ISSUE309

Browse source 
deprecated --disable-legacy-registry
This commit is contained in:
Thomas Sjögren 2018-07-01 20:55:32 +02:00 committed by GitHub
commit b73d254e76
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
tests/2_docker_daemon_configuration.sh
View file

@ -284,20 +284,28 @@ check_2_12() {
# 2.13
check_2_13() {
check_2_13="2.13 - Ensure operations on legacy registry (v1) are Disabled"
docker_version=$(docker version | grep -i -A2 '^server' | grep ' Version:' \
| awk '{print $NF; exit}' | tr -d '[:alpha:]-,.')
totalChecks=$((totalChecks + 1))
if get_docker_configuration_file_args 'disable-legacy-registry' | grep 'true' >/dev/null 2>&1; then
pass "$check_2_13"
logjson "2.13" "PASS"
currentScore=$((currentScore + 1))
elif get_docker_effective_command_line_args '--disable-legacy-registry' | grep "disable-legacy-registry" >/dev/null 2>&1; then
pass "$check_2_13"
logjson "2.13" "PASS"
currentScore=$((currentScore + 1))
if [ "$docker_version" -lt 1712 ]; then
check_2_13="2.13 - Ensure operations on legacy registry (v1) are Disabled"
if get_docker_configuration_file_args 'disable-legacy-registry' | grep 'true' >/dev/null 2>&1; then
pass "$check_2_13"
logjson "2.13" "PASS"
currentScore=$((currentScore + 1))
elif get_docker_effective_command_line_args '--disable-legacy-registry' | grep "disable-legacy-registry" >/dev/null 2>&1; then
pass "$check_2_13"
logjson "2.13" "PASS"
currentScore=$((currentScore + 1))
else
warn "$check_2_13"
logjson "2.13" "WARN"
currentScore=$((currentScore - 1))
fi
else
warn "$check_2_13"
logjson "2.13" "WARN"
currentScore=$((currentScore - 1))
check_2_13="2.13 - Ensure operations on legacy registry (v1) are Disabled (Deprecated)"
info "$check_2_13"
logjson "2.13" "info"
fi
}